CVE-2005-1471

Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data...

CVE-2005-1471

Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data...

CVE-2005-1471

The CVE-2005-1471 issue is a heap overflow in RSA Authentication Agent for Web for IIS (RSA SecurID Web Agent) when processing chunked transfer-encoding data. This vulnerability could allow a remote attacker to execute arbitrary code on the server, typically with LocalSystem privileges on the IIS...

[Full-disclosure] [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow

SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: RSA SecurID Web Agent Heap Overflow Release Date: 06-05-2005 Application: RSA SecurID Web Agent 5 RSA SecurID Web Agent 5.2 RSA SecurID web Agent 5.3 Platform: Windows 2000 / IIS Severity: Remote Code Execution Author: Gary O'leary-Steele...

CVE-2001-1461

CVE-2001-1461 is a directory traversal vulnerability in the WebID component of RSA Security SecurID 5.0, used by ACE/Agent on Windows, Windows NT and Windows 2000. The root cause is improper handling of URL-encoded sequences ("/.." and ".."), allowing an attacker to access restricted resources. T...

CVE-2001-1461

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

CVE-2005-0486

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...

Tarantella Secure Global Desktop user enumeration

If RSA SecurID is used for authentication error messages differes for invalid username...

CVE-2005-0486

CVE-2005-0486 affects Tarantella Secure Global Desktop Enterprise Edition (3.42–4.00) and Tarantella Enterprise 3 (3.30–3.40). When RSA SecurID is used and multiple users share the same username, authentication can disclose sensitive info, enabling remote attackers to identify valid usernames and...

CVE-2005-0486

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...

Microsoft URLScan 2.5/RSA Security SecurID 5.0 - Configuration Enumeration

source: https://www.securityfocus.com/bid/8419/info A weakness has been discovered in Microsoft URLScan and RSA Security SecurID when used in conjunction on a web server. The problem is said to occur due to the order in which the products are placed within the global ISAPI filter list. When the...

Microsoft URLScan 2.5RSA Security SecurID 5.0 - Configuration Enumeration

Microsoft URLScan 2.5RSA Security SecurID 5.0 - Configuration Enumeration source: https://www.securityfocus.com/bid/8419/info A weakness has been discovered in Microsoft URLScan and RSA Security SecurID when used in conjunction on a web server. The problem is said to occur due to the order in whi...

CVE-2002-0507

An interaction between Microsoft Outlook Web Access OWA with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA...

CVE-2002-0507

An interaction between Microsoft Outlook Web Access OWA with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA...

CVE-2002-0507

CVE-2002-0507 describes an authentication bypass in Microsoft Outlook Web Access (OWA) when used with RSA SecurID. Local users could bypass SecurID for a previous user by submitting multiple OWA Authentication requests using the previous user’s password, which is eventually accepted by OWA. The N...

CVE-2001-1461

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

Sample SecurID Token Emulator with Token Secret Import

Sample SecurID Token Emulator with Token Secret Import We have performed some cryptoanalysis and let's just say we do have grounds to believe that this algorithm is easily breakable. Once again, security of the cipher should be based entirely on the secrecy of the key, not the algorithm. Least...

Potential DoS Attack on RSA's ACE/Server

Hi folks, RSA Security http://www.rsasecurity.com/ produce a 2 factor secure authentication solution called ACE/Server. This uses SecurID tokens to enforce authentication and runs on NT/2000 and Solaris. It is possible for a nonprivileged user on the same network as the ACE/Server to trivially...